GHSA-VM77-MR48-27WJ nossrf Server-Side Request Forgery (SSRF)

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery SSRF, where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism...

CVE-2025-2691

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery SSRF where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism...

nossrf 安全漏洞

nossrf is a Snyk open source package. A security vulnerability exists in versions prior to nossrf 1.0.4 that stems from an attacker being able to bypass SSRF protection mechanisms by providing hostnames that resolve to local or reserved IP address spaces...